General

  • Target

    7881d950eabc4d268062578357b444f1_JaffaCakes118

  • Size

    59KB

  • Sample

    241028-jqnmaatfpa

  • MD5

    7881d950eabc4d268062578357b444f1

  • SHA1

    447d963e8f265a1523e450156aad12239a347c9b

  • SHA256

    7cbb762112ac930f5da01062e6095bd6c87c955fcc7d6346a51f462dd19fc502

  • SHA512

    aa32290259d99bebd7bbcb5fab98799a4435cc45df2b7c69a685b93dc741ed117514dd208d2b4757079266d568aa34cd079f8e0b27abf3c604e72db5221dee6d

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPA:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdr

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      7881d950eabc4d268062578357b444f1_JaffaCakes118

    • Size

      59KB

    • MD5

      7881d950eabc4d268062578357b444f1

    • SHA1

      447d963e8f265a1523e450156aad12239a347c9b

    • SHA256

      7cbb762112ac930f5da01062e6095bd6c87c955fcc7d6346a51f462dd19fc502

    • SHA512

      aa32290259d99bebd7bbcb5fab98799a4435cc45df2b7c69a685b93dc741ed117514dd208d2b4757079266d568aa34cd079f8e0b27abf3c604e72db5221dee6d

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPA:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdr

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks